Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Xi5mesVEh11A7lruKEw4KWqSqA.roa
File: 8Xi5mesVEh11A7lruKEw4KWqSqA.roa (raw, json)
Hash identifier: 5+JfLbekIZtVuR3JfH+/l/CTUYcq7C5ocOnBwckLf3Q=
Subject key identifier: F1:78:B9:99:EB:15:12:1D:75:03:B9:6B:B8:A1:30:E0:A5:AA:4A:A0
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Xi5mesVEh11A7lruKEw4KWqSqA.roa
Signing time: Thu 15 Sep 2022 02:47:10 +0000
ROA not before: Thu 15 Sep 2022 02:47:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131628
IP address blocks: 175.99.0.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F178B999EB15121D7503B96BB8A130E0A5AA4AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:86:fe:65:98:a9:67:d4:65:db:1b:12:a4:
d2:ff:86:ef:26:6d:d3:de:f7:3b:15:d3:f6:d2:f2:
c5:84:46:71:39:02:14:a0:cb:ef:e7:11:4e:19:a3:
31:bb:26:30:9a:22:21:dc:6f:24:20:60:fc:a9:e5:
09:8d:00:6b:f2:2f:78:9e:4d:71:62:6d:4b:e5:e5:
9b:3b:59:4f:01:02:0c:16:77:5b:c6:aa:15:ab:9d:
4b:75:52:fd:83:d4:59:f2:14:c6:ef:0b:c8:c9:e1:
03:8d:df:ee:44:49:50:c8:dd:61:0f:e5:06:b8:bb:
9e:86:df:0d:97:69:2a:57:b8:10:f0:56:c7:f0:18:
41:03:22:8d:af:2d:46:95:72:fb:fc:27:26:9d:76:
f1:e4:8e:ef:3f:19:aa:a0:be:5a:fc:44:21:a7:05:
44:ae:f5:23:89:17:26:b4:8e:6b:49:98:36:e8:9c:
e2:13:ae:00:f8:71:3c:30:44:57:64:10:0c:fd:9e:
b7:ad:c1:f9:d5:67:6f:77:9c:1a:5b:f0:b5:5f:a6:
db:b3:b0:ca:f4:5e:82:24:52:b6:88:7b:b1:4f:cf:
1b:61:19:27:b2:e3:f1:cb:e3:89:6b:cf:f0:54:5d:
35:47:17:f6:2b:03:9d:30:35:af:40:ce:2e:f7:39:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:B9:99:EB:15:12:1D:75:03:B9:6B:B8:A1:30:E0:A5:AA:4A:A0
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Xi5mesVEh11A7lruKEw4KWqSqA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:16:9d:b7:85:32:2d:73:f2:e0:d9:18:12:5f:ca:a0:d6:af:
d8:73:92:68:4f:0e:9f:5b:00:69:24:20:da:a2:99:48:8c:58:
82:2e:cf:7a:e3:c7:41:62:c8:4d:4d:40:93:ed:ba:1a:64:12:
56:f6:a1:70:ee:eb:e8:ab:ce:7c:e7:c0:d6:dc:f7:a8:bd:06:
ff:09:6d:5b:79:a9:11:1f:54:52:a9:b1:4f:43:a8:d4:ab:f8:
31:10:67:74:fb:3f:ed:bd:43:76:18:62:a4:0c:d7:6e:02:09:
41:5a:e1:01:f4:8f:aa:90:41:67:31:97:67:2d:07:38:17:ba:
b2:bb:0d:92:0e:8b:90:83:3c:9e:f6:b1:b1:38:77:5c:62:65:
29:60:60:8a:0c:89:ae:17:6b:3a:06:b9:d2:9b:3d:4f:f4:61:
74:b4:84:fa:40:b4:a6:16:47:37:7c:c9:28:71:af:55:64:e4:
c1:c1:30:cb:01:2d:d3:23:67:74:91:22:51:c5:39:6b:1c:d8:
2e:e9:a8:11:0a:b9:39:46:2d:0f:59:7b:3c:d6:dd:4b:e4:b0:
ee:7e:3c:e7:7f:ed:2f:73:15:a0:a4:09:da:61:9c:fa:ac:ab:
f8:7d:60:04:e7:db:ec:1a:d9:e5:bb:12:6c:83:46:98:d6:f3:
34:dd:1c:70
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYxNzhCOTk5RUIxNTEy
MUQ3NTAzQjk2QkI4QTEzMEUwQTVBQTRBQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+Sob+ZZipZ9Rl2xsSpNL/hu8mbdPe9zsV0/bS8sWERnE5AhSg
y+/nEU4ZozG7JjCaIiHcbyQgYPyp5QmNAGvyL3ieTXFibUvl5Zs7WU8BAgwWd1vG
qhWrnUt1Uv2D1FnyFMbvC8jJ4QON3+5ESVDI3WEP5Qa4u56G3w2XaSpXuBDwVsfw
GEEDIo2vLUaVcvv8JyaddvHkju8/Gaqgvlr8RCGnBUSu9SOJFya0jmtJmDbonOIT
rgD4cTwwRFdkEAz9nretwfnVZ293nBpb8LVfptuzsMr0XoIkUraIe7FPzxthGSey
4/HL44lrz/BUXTVHF/YrA50wNa9Azi73OUvFAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU8Xi5mesVEh11A7lruKEw4KWqSqAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvOFhpNW1lc1ZFaDExQTds
cnVLRXc0S1dxU3FBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Ba9jADANBgkqhkiG9w0BAQsFAAOCAQEASxadt4UyLXPy4NkYEl/KoNav2HOSaE8O
n1sAaSQg2qKZSIxYgi7PeuPHQWLITU1Ak+26GmQSVvahcO7r6KvOfOfA1tz3qL0G
/wltW3mpER9UUqmxT0Oo1Kv4MRBndPs/7b1DdhhipAzXbgIJQVrhAfSPqpBBZzGX
Zy0HOBe6srsNkg6LkIM8nvaxsTh3XGJlKWBgigyJrhdrOga50ps9T/RhdLSE+kC0
phZHN3zJKHGvVWTkwcEwywEt0yNndJEiUcU5axzYLumoEQq5OUYtD1l7PNbdS+Sw
7n4853/tL3MVoKQJ2mGc+qyr+H1gBOfb7BrZ5bsSbINGmNbzNN0ccA==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org